Viro Vet Diagnostik (GmbH) Privacy Policy

1. Controller

Viro Vet Diagnostik GmbH

Represented by: Prof. Dr. F. Weber

Schubertstr. 81

35392 Gießen

Germany

E-mail: [email protected]

Phone: 0049 641 99 38350 Fax: 0049 641 99 38359

2. Purposes and Legal Bases of Data Processing

2.1 Performance of Diagnostic Examinations

We process personal data, including animal health data, in order to fulfil the diagnostic contract and to provide the requested laboratory services.

Legal bases:

Art. 6(1)(b) GDPR (performance of a contract)
Art. 6(1)(c) GDPR (legal obligations)
Art. 9(2)(h) GDPR (processing of health data for medical purposes)

Categories of data processed:

Animal data: name, age, sex, identification, vaccination status, medical history, test results, diagnoses
Submitter data (veterinarian/physician): name, address, contact details, bank details
In specific cases: data of the animal owner (e.g., for production of autogenous vaccines, or certificates)

Without this information, proper diagnostic processing is not possible.

3. Data Processing When Using Our Website

When you access our website, technically necessary access data is processed.

Access log data collected:

IP address of the requesting device
Date and time of access
File accessed
Access status
Amount of data transferred
Access method used

Purposes of processing:

Ensuring technical operation
Preventing unauthorized access
Error analysis

Retention period:

Non-anonymized log data: 2 months, then deleted
Anonymized data: statistical evaluation

Analytics tool: We use Fathom Analytics (GDPR-compliant, no cookies, no personal profiles). IP addresses are anonymized.

Cookies: Our website does not use cookies.

4. Use of the Information Provided

We use personal data exclusively for:

Processing diagnostic orders
Preparing reports and certificates
Invoicing
Fulfilling statutory reporting obligations
Internal statistical evaluations (anonymized only)

5. Disclosure of Personal Data

Data is only disclosed if required by law or if you have given consent.

Possible recipients:

Authorities under the Animal Health Act or Infection Protection Act
Border control or entry authorities (for certificates)
Tax advisors and payment service providers
Official bodies with authorized access to certificate data (authentication via animal ID and diary number)

No data is transferred to other third parties.

6. Retention Period

Personal data is stored only as long as necessary to perform the diagnostic examination.

Statutory retention requirement: At least 10 years after completion of the examination (Art. 6(1)(c) GDPR in conjunction with professional regulations).

Data is stored exclusively on servers within the EU.

7. Rights of Data Subjects

Under Art. 12–23 GDPR, you have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)

Right to lodge a complaint:

The Hessian Commissioner for Data Protection and Freedom of Information

Prof. Dr. Alexander Roßnagel

Wilhelmstr. 7

65185 Wiesbaden

Phone: 0611/1408 0

E-mail: [email protected]

8. Data Security

We implement technical and organizational measures to protect personal data from unauthorized access, loss, or misuse. However, absolute security cannot be guaranteed.

Data protection breaches are reported to the supervisory authority in accordance with Art. 33 GDPR.

9. Changes to This Privacy Policy

This policy will be updated if legal requirements or internal processes change. The current version is published on our website.